AWSSecretsManager.Provider¶

AWSSecretsManager.Provider is a Microsoft.Extensions.Configuration provider that loads configuration values from AWS Secrets Manager. It plugs into the standard IConfigurationBuilder pipeline the same way AddJsonFile or AddEnvironmentVariables do, so secrets show up alongside your other configuration sources with no special API to learn.

A sibling package, AWSSSM.Provider, provides the same pipeline backed by AWS SSM Parameter Store.

It is a modern, community-maintained fork of Kralizek/AWSSecretsManagerConfigurationExtensions (originally by Renato Golia), retargeted to current .NET, converted to System.Text.Json only, and extended with structured logging, polling/reload, and batch-fetch support.

What it does¶

• Fetches secrets from AWS Secrets Manager and exposes them as IConfiguration key/value pairs.
• Flattens JSON-object/array secret values into hierarchical, :-delimited configuration keys — the same shape appsettings.json produces.
• Supports filtering (by ARN allowlist, custom predicate, or AWS-side ListSecrets filters), custom key naming, custom AWS client construction, and optional background polling for live reload.
• Works from netstandard2.0 up through the latest .NET, in console apps, worker services, and ASP.NET Core. Native AOT is officially supported for net8.0 and later.

What it doesn't do¶

• It does not create, rotate, or manage secrets — it only reads them.
• It does not decode binary secret values (SecretBinary) — only string secrets (SecretString) are surfaced (see Configuration & Secret Mapping).
• It does not resolve AWS credentials or region on its own beyond what the AWS SDK for .NET already does — see Authentication & Security.

Where to go next¶

Installation¶

dotnet add package AWSSecretsManager.Provider

See Getting Started for a complete first example.